Re: [exim] what is log part ? attack ?

Top Page
Delete this message
Reply to this message
Author: Heiko Schlittermann
Date:  
To: exim-users
Subject: Re: [exim] what is log part ? attack ?
Hi,

Sławomir Dworaczek <slawek@???> (Fr 09 Okt 2015 13:30:05 CEST):
>
> The problem is that I never have set such a domain in any configuration file
> in the system


Then add +pid to the log selector options to see if
the process accepting the message is the same as the process
complaining.

The connections from you log do not indicate some relation to
smarthost.win.pl, thus exim gets this name from somewhere else?
Where does Exim get such names from?

    - configuration (literally mentioned in some host list)
    - external files read (lookup) from the configuration
    - as a result of a PTR query to any address it sees (connecting
      host, wildcards in some hostlist, …)
    - names sent from clients (EHLO)
    - verification (sender/recipient verifcation)
    - routing


    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
-- 
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -